Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
File:                     d_jn-9SraVB_sf41ea80OlZjkIY.mft (raw, json)
Hash identifier:          iJf08DagEJWsq5MWte5SRSqDtwYOPiNCnlIHuoim+eA=
Subject key identifier:   CC:04:3A:50:6D:50:46:65:74:7A:8F:B5:E9:C1:3B:FE:C5:B3:81:F6
Authority key identifier: 77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
Certificate issuer:       /CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Certificate serial:       01A0024B1593EC768FEF0EC4E2E96A8FF7A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
Manifest number:          12C1
Signing time:             Fri 14 Aug 2026 22:01:10 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:10 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:10 +0000
Files and hashes:         1: IM14LBYF8xBAMrWihjQwJhZWTFs.roa (hash: L/LoNTKL0OkWZiTSY3TN85uewDjoeQN9VcIBqy5aAq8=)
                          2: d_jn-9SraVB_sf41ea80OlZjkIY.crl (hash: bcl5WZkf8VZauL0xOTNYm8cVRB/zOrTDCtq5PWAOSvw=)
                          3: meqA3EJ2dk40MOFtOn3KY_3JqZc.roa (hash: PMvWvyZeQ/F56OIn+Hm8HW0sQqsC8sTM1/3A775LAFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 22:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4b:15:93:ec:76:8f:ef:0e:c4:e2:e9:6a:8f:f7:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
        Validity
            Not Before: Aug 14 22:01:10 2026 GMT
            Not After : Aug 15 22:01:10 2026 GMT
        Subject: CN=cc043a506d504665747a8fb5e9c13bfec5b381f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f8:6b:d6:57:35:87:f9:29:29:70:7b:e2:9f:
                    53:b2:c4:dd:85:77:e3:0b:58:39:a9:5b:02:11:f2:
                    3b:49:f9:72:8f:5d:2b:c7:7f:87:05:19:47:7a:fe:
                    d2:ed:64:a6:6f:da:99:e3:99:be:09:a2:49:20:22:
                    1f:00:89:31:bc:d1:64:65:16:1b:00:ff:3b:15:ab:
                    0f:ca:07:34:59:82:55:66:50:2e:c0:10:ac:4a:81:
                    77:fc:b2:a5:d3:e8:ef:e4:ad:e0:f0:b5:14:b5:c1:
                    4e:bb:36:f5:b5:01:a3:d2:e1:ab:09:2f:a0:56:7a:
                    f3:0a:b1:2d:50:7d:60:79:95:2f:6b:ab:b5:34:14:
                    c4:0e:6d:2a:ff:cf:36:3d:38:35:8b:6e:eb:35:9b:
                    5b:a9:f7:9e:e5:b6:90:09:7f:dc:ce:41:d0:72:71:
                    6f:06:a4:cd:76:d0:22:c6:29:46:d0:bd:69:47:48:
                    9e:46:48:5c:a6:19:0d:27:6e:b9:96:b1:76:be:de:
                    08:8e:c3:72:40:04:2b:5b:2a:8e:c1:83:71:7a:92:
                    9f:59:e2:5c:09:d8:8d:9b:d0:10:bd:57:cc:b0:bc:
                    a5:b5:41:68:f1:7c:63:89:29:ad:bc:7a:3d:de:ba:
                    83:71:82:fd:95:bd:0a:25:aa:d3:64:66:54:40:e4:
                    eb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:04:3A:50:6D:50:46:65:74:7A:8F:B5:E9:C1:3B:FE:C5:B3:81:F6
            X509v3 Authority Key Identifier:
                keyid:77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:d6:c6:59:c1:4a:16:0c:a6:3f:e3:10:50:93:30:9d:f1:08:
         99:33:b4:f3:b9:cb:fd:b3:1a:50:52:5f:63:e6:e9:4f:e2:ec:
         52:17:a5:6c:5f:10:20:2f:7e:d2:d8:65:da:b8:f0:98:12:f0:
         23:42:2e:30:24:9d:14:d3:fe:6e:88:6f:4a:1e:4d:c3:27:d6:
         99:9c:71:fe:d1:84:35:15:0e:f2:79:03:85:7e:48:8b:aa:a4:
         3b:23:a1:6d:a2:00:98:57:6a:dc:bc:09:8c:6b:ec:ac:1b:05:
         f2:b1:fe:04:93:fd:30:05:81:85:06:63:66:89:1c:1c:29:b8:
         c5:30:56:14:50:f8:2f:03:c0:90:79:52:75:ae:b9:d1:bf:f0:
         d4:1e:b5:d5:f8:4c:a5:80:ad:82:47:4d:87:d6:02:2f:c3:6a:
         41:39:f9:85:9b:e9:83:14:c8:6a:03:92:f6:25:2c:09:aa:6f:
         e1:d1:4f:37:fb:79:51:44:96:8f:94:8b:fb:9f:10:7f:26:31:
         61:87:c2:8f:06:b2:b8:50:5c:9d:4d:24:52:4b:23:d0:c7:6b:
         1f:c0:3e:7b:5d:b8:50:df:5b:19:05:bb:d7:b7:bb:fb:6d:f4:
         d2:6b:06:48:1f:8b:7b:bc:9c:24:f2:61:f9:45:6d:59:3e:27:
         ee:c4:b7:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACSxWT7HaP7w7E4ulqj/epMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjhlN2ZiZDRhYjY5NTA3ZmIxZmUzNTc5YWYzNDNhNTY2
MzkwODYwHhcNMjYwODE0MjIwMTEwWhcNMjYwODE1MjIwMTEwWjAzMTEwLwYDVQQD
EyhjYzA0M2E1MDZkNTA0NjY1NzQ3YThmYjVlOWMxM2JmZWM1YjM4MWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vhr1lc1h/kpKXB74p9TssTdhXfj
C1g5qVsCEfI7Sflyj10rx3+HBRlHev7S7WSmb9qZ45m+CaJJICIfAIkxvNFkZRYb
AP87FasPygc0WYJVZlAuwBCsSoF3/LKl0+jv5K3g8LUUtcFOuzb1tQGj0uGrCS+g
VnrzCrEtUH1geZUva6u1NBTEDm0q/882PTg1i27rNZtbqfee5baQCX/czkHQcnFv
BqTNdtAixilG0L1pR0ieRkhcphkNJ265lrF2vt4IjsNyQAQrWyqOwYNxepKfWeJc
CdiNm9AQvVfMsLyltUFo8XxjiSmtvHo93rqDcYL9lb0KJarTZGZUQOTrGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwEOlBtUEZldHqPtenBO/7Fs4H2MB8GA1UdIwQY
MBaAFHf45/vUq2lQf7H+NXmvNDpWY5CGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9qbi05U3JhVkJfc2Y0MWVhODBPbFpqa0lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82YzI3MzYtYWIwMi00ODk3LTk1Njgt
NzdmNmU5NGUzZGNjLzEvZF9qbi05U3JhVkJfc2Y0MWVhODBPbFpqa0lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82YzI3MzYtYWIwMi00ODk3LTk1NjgtNzdmNmU5NGUzZGNj
LzEvZF9qbi05U3JhVkJfc2Y0MWVhODBPbFpqa0lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAStbGWcFK
FgymP+MQUJMwnfEImTO087nL/bMaUFJfY+bpT+LsUhelbF8QIC9+0thl2rjwmBLw
I0IuMCSdFNP+bohvSh5NwyfWmZxx/tGENRUO8nkDhX5Ii6qkOyOhbaIAmFdq3LwJ
jGvsrBsF8rH+BJP9MAWBhQZjZokcHCm4xTBWFFD4LwPAkHlSda650b/w1B611fhM
pYCtgkdNh9YCL8NqQTn5hZvpgxTIagOS9iUsCapv4dFPN/t5UUSWj5SL+58QfyYx
YYfCjwayuFBcnU0kUksj0MdrH8A+e124UN9bGQW717e7+2300msGSB+Le7ycJPJh
+UVtWT4n7sS3/Q==
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:07:42 2026 by rpki-client